7 Commits

Include renames

Author	SHA1	Message	Date
retoor	3fbac87723	feat: replace inline IP resolution with centralized client_ip utility across routers and audit ... Consolidate scattered `X-Real-IP` / `request.client.host` fallback logic into the single `client_ip()` helper from `utils`, reducing duplication in the rate limiter middleware, project file zip routes, tools shared module, and audit record builder. Also refactor three admin endpoints (`/ai-usage/data`, `/analytics`, `/users/{uid}/ai-usage`) to use the existing `require_admin()` guard instead of repeating manual auth checks, and remove now-unused `get_current_user`/`is_admin` imports from those modules.	2026-07-04 18:07:33 +00:00
retoor	741d7aade6	docs: add block/mute user relations, emoji-sync CLI, and uid indexes ... - Add `/block`, `/mute` endpoints with block/unblock and mute/unmute functionality in `routers/relations.py`, hiding blocked users' content everywhere except their own profile while muting only suppresses notifications - Introduce `devplace emoji-sync` CLI command to regenerate `static/js/emoji-shortcodes.js` from the emoji library, documented in `CLAUDE.md` and wired in `cli.py` - Create `get_blocked_uids()` database helper and apply it in `content.py` `load_detail()` to filter blocked users' posts from detail views - Implement `_uid_index()` and `_drop_index()` helpers in `database.py` for unique uid indexes across tables, with `user_relations` added to `SOFT_DELETE_TABLES` - Document new routes in `AGENTS.md` and `README.md`, including emoji shortcodes rendering behavior distinct from the emoji picker	2026-06-19 08:06:09 +00:00
retoor	6ceca3d0d4	docs: document server-side rendering pipeline, response timing middleware, and Telegram pairing API ... - Add comprehensive documentation for backend content rendering in AGENTS.md, detailing the new `render_content` and `render_title` Jinja globals built on mistune with media processing, emoji shortcodes, and XSS protection - Document the `X-Response-Time` header and bottom-left render time indicator in README.md - Update bot token pricing documentation to clarify fallback vs gateway cost headers - Add `email_accounts` to soft-delete tables and `idx_users_role` composite index in database schema - Implement `telegram_pairings` and `telegram_links` table creation with column migration and indexes - Add `/profile/{username}/telegram` endpoint to docs API with request/unpair actions - Register `TelegramService` in main.py lifespan and add `response_timing` middleware emitting `X-Response-Time` header - Introduce `TelegramPairForm` model and `guard_public_host_sync` synchronous host validation function	2026-06-18 22:09:34 +00:00
retoor	9598a1b867	feat: add wildcard token support for allowed extensions and access token CLI commands ... Introduce WILDCARD_TOKENS set in attachments.py to treat "*", ".*", "*.*" as wildcards that fall back to ALLOWED_UPLOAD_TYPES. Add cmd_token_issue and cmd_token_list CLI commands for issuing and listing DevPlace access tokens. Register access_tokens table in SOFT_DELETE_TABLES and initialize its columns and indexes in init_db. Replace Form() with Depends(json_or_form(...)) in admin backup, container, notification, settings, and user routers to support both JSON and form data.	2026-06-17 17:10:52 +00:00
retoor	0a554ebc32	feat: restrict backup archive download to primary admin and hide admin-hidden projects from other admins ... - Add `get_admin_uids()` and `get_primary_admin_uid()` to database.py for resolving the earliest-created admin - Modify `can_view_project()` in content.py so a project hidden by an admin is invisible to other admins (both web UI and REST API) - Update `_download_url()` and `_backup_payload()` in admin/backups.py to accept a `can_download` flag, gating the download endpoint with `is_primary_admin()` - Remove `role` from `_user_facts()` in docs_live.py to avoid leaking admin status in live docs - Update doc summaries in docs_api.py to reflect the new admin-visibility and backup-download semantics	2026-06-17 14:08:28 +00:00
retoor	d75d5dc6a8	feat: add TTLCache for get_cache_version and TEMPLATE_AUTO_RELOAD config with Makefile worker count variables	2026-06-14 14:46:36 +00:00
retoor	ede7a863b7	chore: remove stale agent reports and add PYTHONDONTWRITEBYTECODE export to Makefile ... Delete four stale SEO and style agent report JSON/MD files from agents/reports/ that had zero findings or were superseded. Export PYTHONDONTWRITEBYTECODE=1 in the Makefile so all make targets suppress bytecode generation, and add a `tree` target that lists the repository file tree via git ls-tree. Update AGENTS.md and CLAUDE.md documentation to reflect that routers now form a directory tree mirroring URL paths and that bytecode writing is disabled project-wide.	2026-06-13 16:27:41 +00:00